CVE-2010-4694

Buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to cause a denial of service (application crash) or have unspecified other impact via a GIF file that contains many images, leading to long extensions such as .p100 for PNG output files, as demonstrated by a CGI program that launches gif2png, a different vulnerability than CVE-2009-5018.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

2.01% chance of exploitation in the next 30 days, 79th percentile

Published

2011-01-14

Updated

2024-08-07

Proof-of-concept exploits (1)

• https://bugzilla.redhat.com/show_bug.cgi?id=547515

References

• CVE Record
• NVD entry

Related

• CVE-2010-4693
• CVE-2010-4701
• CVE-2010-4669
• CVE-2010-4709
• CVE-2010-4647
• CVE-2010-4711